Commit Graph

906 Commits

Author SHA1 Message Date
Frank Denis 34e78a2446 Don't create a new session; it breaks `-service stop`. 2018-06-14 19:13:52 +02:00
Sebastian Schmidt 8f2972845d Note that Windows doesn't support username option (#494) 2018-06-14 09:35:13 +02:00
Frank Denis 7f8b8d043e Remove old daemonization code
We will be able do it using fork+exec
2018-06-13 17:31:47 +02:00
Frank Denis 09e39c785a Keep the process running in foreground to avoid a breaking change/allow monitoring
This currently doesn't replace the previous process. Maybe there is a way to achieve
this in Go. Need to look closer at os.exec

Also start-child -> child
2018-06-13 17:24:16 +02:00
Frank Denis fe0aa52fba Make description more accessible in the example configuration file
Also don't enable this by default, as "nobody" may not exist everywhere
2018-06-13 16:54:57 +02:00
Sebastian Schmidt aab7e6380f Drop privileges with exec (#467)
* Drop privileges with exec and SysProcAttr

* Fix windows build

* Fix passing logfile fd
2018-06-13 16:52:41 +02:00
Frank Denis 8d99e95288 Update deps 2018-06-13 16:52:04 +02:00
Frank Denis ae54a7aafc Revert "Do not mention systemd activation until #480 is solved"
This reverts commit 066345123b.
2018-06-13 16:49:57 +02:00
dwimmer b498e6655e Fix systemd socket connections (#492)
Upstream systemd go library broke use of TCP and UDP sockets at the same time.
Changed to use lower level API to work around this. Also improved logging of
systemd socket connections to include systemd unit file name and address.
2018-06-13 16:49:32 +02:00
Frank Denis 600b6c0f60 Merge branch 'master' of github.com:jedisct1/dnscrypt-proxy
* 'master' of github.com:jedisct1/dnscrypt-proxy:
  Do not mention systemd activation until #480 is solved
2018-06-08 16:03:10 +02:00
Frank Denis 44729df987 Use Go 1.10.3 2018-06-08 16:02:53 +02:00
Frank Denis 066345123b Do not mention systemd activation until #480 is solved 2018-06-08 06:35:47 +02:00
Frank Denis 9135efcaec Use net.Conn everywhere
I don't know how to use a TCPConn as a Conn.
2018-06-06 19:06:44 +02:00
Frank Denis 7866e6da51 Bump 2018-06-06 16:14:31 +02:00
Frank Denis 5b1fc8da2a Update deps 2018-06-06 16:10:10 +02:00
Frank Denis 0166f21b27 Add built-in support for Tor 2018-06-06 15:54:51 +02:00
Frank Denis 977dcad826 Improved return codes 2018-06-04 23:18:28 +02:00
Frank Denis 3bbdf93095 Log return codes in LTSV qeruylog files
DNS return codes are not enough; we need to change this to something
more expressive.

In particular, we can't use them to distinguish between a server block,
a blacklist block, and a plugin block such as the IPv6 blocker.
2018-06-04 21:35:07 +02:00
Frank Denis b6e6a19b50 Make logging plugins independent from query/response plugins 2018-06-04 20:52:16 +02:00
Frank Denis cf41921183 Draft 10 2018-06-03 01:57:50 +02:00
Frank Denis dfe32a658b Draft 09 2018-06-01 14:35:53 +02:00
Frank Denis e747cf8704 Adapt to the new systemd API 2018-05-31 19:58:33 +02:00
Frank Denis 2b9816ab91 Merge branch 'master' of github.com:jedisct1/dnscrypt-proxy
* 'master' of github.com:jedisct1/dnscrypt-proxy:
  Ensure static linked binary (for linux) (#459)
2018-05-31 19:08:44 +02:00
Frank Denis cdfe7ba673 Deps update 2018-05-31 19:08:31 +02:00
chenhw2 35a036c16c Ensure static linked binary (for linux) (#459) 2018-05-21 22:45:42 +01:00
Frank Denis b9764f8248 Add minisign/.travis 2018-05-19 10:44:10 +02:00
Frank Denis 5e71c5203e ChangeLog 2018-05-19 10:42:56 +02:00
Frank Denis 26579df8d1 Bump 2018-05-19 10:40:15 +02:00
Frank Denis da06657963 application/dns-message 2018-05-19 02:39:32 +02:00
Frank Denis 0b72301e76 We're at draft 8 already 2018-05-19 02:31:22 +02:00
Frank Denis eff3272b9f Update deps 2018-05-19 01:50:26 +02:00
Frank Denis 33537be040 Use a netprobe address less likely to be blocked/considered invalid 2018-05-19 00:06:28 +02:00
Frank Denis f44d9f658b Revert "Update deps"
This reverts commit 49e5c87f8d.
2018-05-16 11:53:20 +02:00
Frank Denis d87f3618ac Bump 2018-05-16 11:41:55 +02:00
Frank Denis 49e5c87f8d Update deps 2018-05-16 11:39:59 +02:00
Frank Denis 281c2fa7f4 Don't add padding if the query matches the block size
Fixes #446
2018-05-16 11:31:47 +02:00
Frank Denis 255423588c REFUSED responses are fine for filtering resolvers 2018-05-11 03:31:25 +02:00
Frank Denis 7774d9cf05 Avoid long lines 2018-05-10 22:19:04 +02:00
Frank Denis 6f047e07b8 Bump 2018-05-10 22:17:57 +02:00
Frank Denis ce62981c44 Wait for network connectivity before starting the proxy 2018-05-10 21:59:25 +02:00
Frank Denis 113a952b94 Add missing travis file 2018-05-10 12:03:26 +02:00
Frank Denis 2b070c6e93 Deps update 2018-05-10 12:03:06 +02:00
Frank Denis 3c1d7acdaf Synthetic SOAs can have constant serial/mail 2018-05-10 10:54:15 +02:00
Frank Denis cdf5b9ce6b IPv6 issues on macOS should be gone 2018-05-10 10:46:11 +02:00
Frank Denis 17dd7336a8 Use a root server as the NS in synthetic SOA responses 2018-05-10 10:45:56 +02:00
Frank Denis 0b5c0af5ee IPv6 blocking: add a synthetic SOA record 2018-05-10 10:39:21 +02:00
Frank Denis b9b19f3381 Merge branch 'master' of github.com:jedisct1/dnscrypt-proxy
* 'master' of github.com:jedisct1/dnscrypt-proxy:
  Mention where the public key is
2018-05-10 09:58:06 +02:00
Frank Denis 4f4daf41b7 Massive dependencies update 2018-05-10 09:56:25 +02:00
Frank Denis 1f373ca4c5
Mention where the public key is
Fixes #426
2018-05-04 12:32:21 +02:00
Frank Denis e6ccf7f3c0 No cookie for @aead :) 2018-05-04 00:36:20 +02:00